Speaking from personal experience (high-tech manufacturing, dealing with SOX-404, FDA CFR11 Part 2, ISO/TUV/CE/..., NATO, and DoD regulations), a lot of this bu

Speaking from personal experience (high-tech manufacturing, dealing with SOX-404, FDA CFR11 Part 2, ISO/TUV/CE/..., NATO, and DoD regulations), a lot of this bureaucracy is self-created by people who are ignorant of the actual requirements but in positions powerful enough to overcome that barrier and force other employees to do needless busywork, resulting in self-imposed regulations that don't need to exist for any legal reason, but which once emplaced are nearly impossible to eliminate.